Lines Matching defs:allow
52 ERR(handle, "neverallow on line %lu of %s (or line %lu of %s) violated by allow %s %s:%s {%s };",
59 ERR(handle, "neverallow on line %lu violated by allow %s %s:%s {%s };",
65 ERR(handle, "neverallow violated by allow %s %s:%s {%s };",
93 static int check_extended_permissions(av_extended_perms_t *neverallow, avtab_extended_perms_t *allow)
97 && (allow->specified == AVTAB_XPERMS_IOCTLFUNCTION)) {
98 if (neverallow->driver == allow->driver)
99 rc = extended_permissions_and(neverallow->perms, allow->perms);
101 && (allow->specified == AVTAB_XPERMS_IOCTLDRIVER)) {
102 rc = xperm_test(neverallow->driver, allow->perms);
104 && (allow->specified == AVTAB_XPERMS_IOCTLFUNCTION)) {
105 rc = xperm_test(allow->driver, neverallow->perms);
107 && (allow->specified == AVTAB_XPERMS_IOCTLDRIVER)) {
108 rc = extended_permissions_and(neverallow->perms, allow->perms);
117 avtab_extended_perms_t *allow)
121 && (allow->specified == AVTAB_XPERMS_IOCTLFUNCTION)) {
123 result->driver = allow->driver;
125 result->perms[i] = neverallow->perms[i] & allow->perms[i];
127 && (allow->specified == AVTAB_XPERMS_IOCTLDRIVER)) {
132 && (allow->specified == AVTAB_XPERMS_IOCTLFUNCTION)) {
134 result->driver = allow->driver;
135 memcpy(result->perms, allow->perms, sizeof(result->perms));
137 && (allow->specified == AVTAB_XPERMS_IOCTLDRIVER)) {
140 result->perms[i] = neverallow->perms[i] & allow->perms[i];
199 "allow %s %s:%s {%s };",